Loading…
We take your privacy seriously. This policy explains how we collect, hold, use and disclose your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).
Oz Finance Hub (ABN 18 941 910 291; 'we', 'us', 'our') operates the website ozfinancehub.com.au and the services on it. We provide free Australian tax and finance calculators, published data pages and an optional paid Pro subscription. This policy explains what personal information we collect, why we collect it, who we share it with and how you can get access to it, correct it or complain about how we have handled it. We handle personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.
Most of the site works without an account and without you telling us anything. What we collect depends on what you use. Account information: your email address, plus authentication data such as session tokens. We never see or store your password in readable form — it is hashed and held by our authentication provider. Data you save in Pro: saved calculations (names, inputs, results, notes and tags), calculation history, income tracker entries, dividend tracker entries, expense and super tracker entries, payslip records you upload or key in and share portfolio trades (ticker, date, units, price and fees). Subscription data: your subscription status and the Stripe customer and subscription IDs we need to keep your access working. We never receive or store your full card number — Stripe handles that end to end. Email updates: if you ask for rate-change updates, we store your email address, the calculator you asked from and the date you asked. Technical data: IP address, browser and device type and pages visited, used for security, troubleshooting and working out which tools are worth improving. Product usage events: when you are signed in and use a feature — opening a Pro module, saving a calculation, starting a checkout — we record the event name, which feature it was and the time, in our own database. These events are not shared with any analytics provider, set no cookies and never contain your calculation inputs or results; we use them only to see which features are worth keeping and improving, and they are deleted after 12 months or with your account, whichever comes first. Messages: if you email us, we keep the message so we can answer it and so we have a record of what was agreed.
Almost always directly from you — when you create an account, sign in, save a calculation, add a tracker or portfolio entry, subscribe to Pro, ask for email updates or contact us. Some technical data is collected automatically when you load a page, including the cookies described below. We do not buy personal information from data brokers and we do not build profiles of you from third-party sources.
To run the site and your account; to authenticate you and keep your session secure; to store and show you your own saved calculations, trackers and portfolio; to answer the questions you ask our AI assistant; to manage your Pro subscription and billing; to send you account and billing emails; to send rate-change updates if you asked for them; to investigate faults, abuse and security incidents; and to meet our legal obligations. We do not sell your personal information. We do not disclose it to third parties for their own marketing.
Pro includes an AI assistant that answers questions about your own recorded portfolio and dividend data in plain English. When you ask it a question, we send that question along with a summary of your recorded trades, holdings, capital gains position and dividend entries to Anthropic, our AI provider, which processes it on servers outside Australia. We do not send your name, email address or payment details. Under Anthropic's commercial terms, that data is not used to train its models. AI answers are generated text: they can be wrong, incomplete or out of date, they are general information rather than advice and you should check anything important against your own records or a registered tax agent before acting on it. Separately, our calculators are deterministic — they apply published ATO rates and thresholds to the numbers you type and show you the working. No part of this site makes an automated decision that produces a legal effect for you or otherwise significantly affects your rights or interests. We do not use automated decision-making to decide whether you get an account, what you pay or what access you have.
We only send marketing email to people who have asked for it. If you subscribe to rate-change updates, we will email you when ATO rates, thresholds or deadlines change and occasionally about new tools. Every one of those emails identifies us as the sender and carries a working unsubscribe link that takes effect within five business days, as the Spam Act 2003 (Cth) requires. You can also unsubscribe by emailing us at hello@ozfinancehub.com.au. Account, security and billing emails are different — they are part of running your account, so you cannot opt out of those while your account is open. You can ask us at any time to tell you where we got your email address from.
Only with the providers we need to run the service, and only for that purpose. Supabase hosts our database and authentication. Stripe processes payments and subscriptions under its own privacy policy. Vercel hosts and serves the site, and also provides the cookieless page-view counts described under "Cookies and analytics". Google provides Google Analytics, described in the same section. Anthropic processes AI assistant questions as described above. Resend delivers our account, billing and rate-update emails, which means it receives your email address and the content of those messages. Each is bound to handle the data appropriately and none of them are permitted to use it for their own marketing. We may also disclose personal information where Australian law requires or authorises it — for example a court order, a regulator exercising a statutory power or where disclosure is reasonably necessary to prevent a serious threat to someone's life, health or safety. If we ever sell or transfer the business, personal information may transfer with it, and we would tell you before that happened.
Some of these providers store or process personal information outside Australia — principally in the United States, which is where Stripe, Anthropic, Resend, Vercel and Google process it, and in Japan, where Supabase hosts our database and authentication service. Before disclosing personal information overseas we take reasonable steps to satisfy ourselves that the recipient handles it consistently with the Australian Privacy Principles, as APP 8 requires, including by relying on the provider's contractual data protection commitments. If you would rather your data was not sent overseas, the practical consequence is that we cannot offer you an account or the AI assistant, because both depend on these providers. You are welcome to keep using the free calculators, which run in your browser and send us nothing.
We use cookies that are necessary to run the site: keeping you signed in, holding your session and protecting against cross-site request forgery. We use Vercel Web Analytics to count page views. It sets no cookies, stores nothing on your device and gives you no identifier that could follow you to another site, so it runs for every visitor and there is nothing for you to consent to — we describe it here because you are entitled to know it is running, not because it stores anything. We also use Google Analytics. It loads for every visitor, but what it is allowed to do is governed by Google's consent mode: while consent is denied it sets no analytics cookies, keeps no identifier for you and sends only cookieless pings, which cannot be joined up into a record of your visits. Where analytics consent is granted it sets cookies to tell us how visitors use the site — which pages they visit, how they got here and roughly where from — so we know which tools are worth improving; the sentence below tells you whether that is the position before you have chosen anything. If you reject non-essential cookies it is denied for as long as that choice stands, and if you reopen the banner from the footer to change your mind we treat that as a withdrawal and go back to denied. Google Analytics does not receive your name, email address or any of your account, calculation or tracker data. We have not enabled Google Signals or user-level advertising features within Analytics. No advertising cookies are set on this site today, because no advertising runs on it — see "If we show advertising" below for what would change if that happens. On your first visit a consent banner lets you choose which non-essential cookies (Analytics and advertising) you accept. If you are visiting from the EEA, the UK or Switzerland none of them are set until you accept. From anywhere else, Analytics cookies are set unless and until you reject them, and the banner is your opt-out; advertising cookies are never set anywhere without your acceptance. You can change your choice at any time from the link in the footer. You can also opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on at tools.google.com/dlpage/gaoptout, or block or clear cookies generally in your browser settings — if you block the essential ones you will not be able to stay signed in.
No advertising runs on this site today, and no ad network is loading any code on it. We have registered the domain with Google AdSense so that if we do turn advertising on to help fund the free calculators, the network is already named here and the consent plumbing is already in place — the disclosure ahead of the first ad rather than after it. This is what would change. Advertising cookies from Google and its advertising partners let them show and measure ads based on your visits to this site and others, and may be used to make the ads you see more relevant. We do not control what a network's own cookies do beyond what its policy describes, and we do not share any personal information we hold about you — your account, your saved calculations or your tracker data — with an ad network for this purpose. Advertising cookies would only ever be set after you consent through the cookie banner, which we show to every visitor rather than only where the law requires it, in line with Google's EU User Consent Policy. You can opt out of personalised advertising at any time at adssettings.google.com (Google) or, for other networks, at youronlinechoices.com.au (Australia) or aboutads.info/choices. Advertising, if and when it appears, will never sit inside a calculator's input or result flow and will never gate access to a free feature.
Some calculators carry a link to a product that suits what the calculator is about, and if you click it and go on to sign up, the provider pays us a commission. Every one is labelled as an advertisement where you see it. These are ordinary links: we do not pass the provider your name, your email address, your account or anything you typed into a calculator, and nothing you enter into a calculator leaves your browser because of one. What we receive back from the provider or its affiliate network is a count of clicks and sign-ups, which does not identify you to us. What does happen is that following the link takes you to a company we do not control: it will set its own cookies, may record that you arrived from this site so it knows to pay us, and from that point its privacy policy governs what it collects rather than ours. If you would rather not be tracked that way, go to the provider directly instead of using the link — it costs you nothing either way and makes no difference to the rate or terms you are offered. We are not responsible for the privacy practices of any site we link to, and we would encourage you to read the policy of any company you are about to give your details to.
Your data is held electronically with the hosting and authentication providers named above. Traffic to the site is encrypted in transit. Access to the production database is restricted to the people who need it, and Pro data is separated per account by row-level security so one account cannot read another's. No system is perfectly secure and we will not pretend otherwise, but we take reasonable steps to protect your information from misuse, interference, loss and unauthorised access, modification or disclosure, and we destroy or de-identify it when we no longer need it.
If a data breach happens and we have reasonable grounds to believe it is likely to result in serious harm to you, we will notify you and the Office of the Australian Information Commissioner as the Notifiable Data Breaches scheme in Part IIIC of the Privacy Act requires. We will tell you what happened, what information was involved and what we recommend you do about it. If we only suspect a breach, we will assess it within 30 days and act on what we find.
Account and Pro data is kept while your account is open, because it is the whole point of the account — your saved calculations and trackers would be worthless if we deleted them. Deleting your account from your account page removes it immediately; if you ask us to close it any other way we will delete or de-identify your personal information within 30 days, except where we have to keep something longer by law (tax and payment records generally have to be kept for five years). Email update subscriptions are kept until you unsubscribe. Technical logs are kept for a short period for security and troubleshooting and are then discarded. Product usage events are deleted after 12 months on a scheduled purge, and immediately if you delete your account.
You can download a full copy of the personal information we hold about you at any time from your account page, free of charge. You can ask us to correct anything that is wrong, out of date or incomplete. You can delete your account yourself at any time from your account page — this immediately cancels any paid subscription and permanently deletes your saved calculations, tracker entries, portfolio trades and payslip history. Your email address is also editable from within the site. We may need to verify who you are before acting on a correction request. In the limited cases where the APPs let us refuse access or correction — for example where granting it would unreasonably affect someone else's privacy — we will tell you why in writing and explain how to complain about it.
This site is built for adults dealing with their own tax and finances and our terms require account holders to be at least 18. We do not knowingly collect personal information from children. If you believe a child has given us personal information, contact us and we will delete it.
If you think we have mishandled your personal information or breached the Australian Privacy Principles, tell us first — email hello@ozfinancehub.com.au with enough detail for us to work out what happened. We will acknowledge you promptly and give you a substantive answer within 30 days. If you are not satisfied with how we handled it, you can take the complaint to the Office of the Australian Information Commissioner at oaic.gov.au/privacy/privacy-complaints or on 1300 363 992. You do not need our permission to do that and it costs you nothing.
We update this policy when the product changes or the law does, and the 'Last updated' date below always reflects the current version. If a change materially affects how we handle your personal information we will tell you before it takes effect, by email or by a notice on the site, rather than quietly editing the page. Every material change is listed under 'Recent changes' below, with the date it took effect, so you can see what moved and when rather than having to compare versions.
16 August 2026 — Analytics cookies. Until this date no analytics cookie was set anywhere on this site until you accepted one. From this date, if you are visiting from the EEA, the UK or Switzerland nothing has changed — still nothing until you accept. From anywhere else, including Australia, Google Analytics cookies are set from your first page view and the banner is your opt-out rather than your opt-in. We changed it because the previous setting meant we could only see about a quarter of our visitors, which is not enough to tell which calculators are worth improving. Nothing else changed: not what we collect, not who we share it with, not how long we keep it, and advertising cookies still require your acceptance everywhere in the world. We published this on the day it took effect rather than before it, which is not what the paragraph above promises. The banner tells you on your first page view and you can reject at any time, so nothing was hidden — but the notice should have come first, and for the next material change it will.
For any privacy question, access or correction request or complaint, email hello@ozfinancehub.com.au and we will get back to you as soon as we reasonably can.
Last updated: 16 August 2026.